Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft
File:                     pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft (raw, json)
Hash identifier:          mcHs6OqNM94o/xg3WggwoDTEAfiVPnV+yS806RdcUPY=
Subject key identifier:   B9:20:39:8E:08:77:B0:E7:C5:47:0C:0F:6D:FD:5C:8B:B8:72:E3:A6
Authority key identifier: A4:5B:BB:DD:D6:E3:F4:6B:BF:30:98:10:88:CB:08:30:C8:27:ED:78
Certificate issuer:       /CN=F36B9E66AF/serialNumber=A45BBBDDD6E3F46BBF30981088CB0830C827ED78
Certificate serial:       0133
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft
Manifest number:          0132
Signing time:             Thu 24 Sep 2026 05:16:30 +0000
Manifest this update:     Thu 24 Sep 2026 05:16:29 +0000
Manifest next update:     Sat 26 Sep 2026 05:16:29 +0000
Files and hashes:         1: pFu73dbj9Gu_MJgQiMsIMMgn7Xg.crl (hash: A4kOlWE+Cc8SFMkgjRyX59JRfd3RvVD6LrVJkkiCwXQ=)
                          2: 6E0807D6CAA311F0B08D3DEADAE4EC9C.roa (hash: JIyzn2B6dN+bLWIT2MmsEgygdG5PQlZ0LVb+z/Fj5r4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9E66AF, serialNumber=A45BBBDDD6E3F46BBF30981088CB0830C827ED78
        Validity
            Not Before: Sep 24 05:16:29 2026 GMT
            Not After : Sep 26 05:16:29 2026 GMT
        Subject: CN=6ab4b22e-cb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:e6:cc:6f:e1:42:61:11:28:16:d0:3a:85:
                    f3:98:04:66:5b:ea:c5:db:45:e6:d2:4f:ee:ca:1b:
                    88:9b:60:60:06:fc:a0:76:7e:7f:12:26:f1:26:92:
                    3a:f2:76:b5:06:9c:aa:da:18:a9:b7:6f:48:67:01:
                    89:46:93:4e:72:e7:d4:19:22:d6:44:7e:f9:0a:8d:
                    8b:f3:71:41:4f:e0:e7:4c:b7:39:72:90:a5:bc:28:
                    ee:35:56:a5:01:fb:84:18:76:eb:05:a1:7a:e5:20:
                    cb:72:aa:03:12:e1:a5:e5:df:74:21:17:28:ab:34:
                    18:de:bc:07:a2:6a:db:39:8d:4a:55:21:9d:6a:ca:
                    f6:2d:c9:b5:57:23:ba:74:c5:82:43:7a:42:5f:dd:
                    b6:f1:1c:e6:94:c2:50:75:4f:2f:5f:55:02:a1:30:
                    18:c8:cb:db:60:cb:57:24:a0:34:8a:40:dc:58:42:
                    bc:86:b1:6a:79:68:e8:16:59:73:f7:e7:da:63:40:
                    b1:8b:a8:33:7f:b2:9a:71:95:49:a8:e9:52:3b:f9:
                    2f:6c:dd:23:09:c1:82:aa:71:01:f3:ad:20:23:ee:
                    54:17:74:74:6a:82:21:a0:d7:47:88:20:0d:20:c7:
                    8d:0d:df:76:e9:0f:af:d5:e5:4b:6d:ad:47:9f:00:
                    c1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:20:39:8E:08:77:B0:E7:C5:47:0C:0F:6D:FD:5C:8B:B8:72:E3:A6
            X509v3 Authority Key Identifier:
                keyid:A4:5B:BB:DD:D6:E3:F4:6B:BF:30:98:10:88:CB:08:30:C8:27:ED:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:da:c6:fb:e9:c2:41:ef:7a:7b:8e:6c:5d:28:5e:f2:33:bd:
         49:cd:c1:5b:1b:c0:7a:7e:27:00:0a:e4:58:30:9d:69:49:e2:
         60:c1:3c:5c:3b:3c:f5:ea:65:54:ef:b5:e0:2e:56:78:ba:0a:
         f0:19:88:43:4a:9a:9c:f1:6b:55:23:ef:00:72:de:ae:7c:0c:
         cd:ea:49:1c:39:61:98:06:bc:f2:d4:93:bb:ad:39:37:a1:b3:
         e6:36:02:f0:73:f2:6d:68:ce:16:f8:ca:ec:76:c7:a7:f6:3e:
         1a:cd:4c:ae:04:88:53:4c:77:79:45:4b:97:fb:c2:e3:55:2a:
         63:36:13:77:e7:44:9e:c7:81:1e:20:5a:fe:c5:34:e2:56:54:
         63:0b:cd:f6:cc:44:a8:39:9f:cb:8c:30:69:16:64:2b:0e:f1:
         6e:26:8a:4d:07:32:2b:37:91:84:04:6a:fe:28:57:80:60:d0:
         06:b1:d4:c7:d6:72:87:6f:1c:91:eb:70:a3:e2:1d:1a:46:4e:
         87:97:55:d1:68:97:2f:26:96:3a:5e:de:8d:1f:32:3e:78:6b:
         14:9d:1f:a0:5f:29:3c:5f:5b:3d:98:21:a6:b5:0b:19:e6:b9:
         9b:3e:a3:81:8d:86:d6:1a:91:7a:01:e3:ac:3e:6c:af:36:d8:
         33:c1:13:3b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICATMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjlFNjZBRjExMC8GA1UEBRMoQTQ1QkJCRERENkUzRjQ2QkJGMzA5ODEwODhDQjA4
MzBDODI3RUQ3ODAeFw0yNjA5MjQwNTE2MjlaFw0yNjA5MjYwNTE2MjlaMBgxFjAU
BgNVBAMTDTZhYjRiMjJlLWNiNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDV/ObMb+FCYREoFtA6hfOYBGZb6sXbRebST+7KG4ibYGAG/KB2fn8SJvEm
kjrydrUGnKraGKm3b0hnAYlGk05y59QZItZEfvkKjYvzcUFP4OdMtzlykKW8KO41
VqUB+4QYdusFoXrlIMtyqgMS4aXl33QhFyirNBjevAeiats5jUpVIZ1qyvYtybVX
I7p0xYJDekJf3bbxHOaUwlB1Ty9fVQKhMBjIy9tgy1ckoDSKQNxYQryGsWp5aOgW
WXP359pjQLGLqDN/sppxlUmo6VI7+S9s3SMJwYKqcQHzrSAj7lQXdHRqgiGg10eI
IA0gx40N33bpD6/V5UttrUefAMHDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuSA5
jgh3sOfFRwwPbf1ci7hy46YwHwYDVR0jBBgwFoAUpFu73dbj9Gu/MJgQiMsIMMgn
7XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI5RTY2L0QzOEY2OEFDQ0FBMjExRjA4NjhENDNFNkRBRTRFQzlDL3BGdTcz
ZGJqOUd1X01KZ1FpTXNJTU1nbjdYZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BGdTczZGJqOUd1X01KZ1FpTXNJTU1nbjdYZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjlFNjYvRDM4RjY4QUNDQUEyMTFGMDg2OEQ0M0U2REFF
NEVDOUMvcEZ1NzNkYmo5R3VfTUpnUWlNc0lNTWduN1hnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCP2sb76cJB73p7jmxdKF7yM71JzcFb
G8B6ficACuRYMJ1pSeJgwTxcOzz16mVU77XgLlZ4ugrwGYhDSpqc8WtVI+8Act6u
fAzN6kkcOWGYBrzy1JO7rTk3obPmNgLwc/JtaM4W+Mrsdsen9j4azUyuBIhTTHd5
RUuX+8LjVSpjNhN350Sex4EeIFr+xTTiVlRjC832zESoOZ/LjDBpFmQrDvFuJopN
BzIrN5GEBGr+KFeAYNAGsdTH1nKHbxyR63Cj4h0aRk6Hl1XRaJcvJpY6Xt6NHzI+
eGsUnR+gXyk8X1s9mCGmtQsZ5rmbPqOBjYbWGpF6AeOsPmyvNtgzwRM7
-----END CERTIFICATE-----